CVE-2014-0786

Ecava IntegraXor Information Exposure

State: Published
Severity: 7.5 High
Published: May 1, 2014
Updated: Oct 13, 2025
Reserved: Jan 2, 2014

Description

Ecava IntegraXor before 4.1.4393 allows remote attackers to read cleartext credentials for administrative accounts via SELECT statements that leverage the guest role.

Scores

CVSS	Score	Vector	Source
2.0	7.5 High	AV:N/AC:L/Au:N/C:P/I:P/A:P	icscert

Weaknesses

CWE-200

Affected Products

Product	Versions
IntegraXorEcava	before 4.1.4410Affected

References

http://www.integraxor.com/blog/category/security/vulnerability-note/
https://www.cisa.gov/news-events/ics-advisories/icsa-14-091-01
https://www.cisa.gov/news-events/ics-advisories/icsa-14-224-01
http://ics-cert.us-cert.gov/advisories/ICSA-14-091-01

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.